Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jcCwZAf4pUQeMIhtL8rdo_9QeeM.roa
File: jcCwZAf4pUQeMIhtL8rdo_9QeeM.roa (raw, json)
Hash identifier: p78z3a+0RY+Q11Ta8W3dkrHAWLVEbaFmGdlDxxkEle0=
Subject key identifier: 8D:C0:B0:64:07:F8:A5:44:1E:30:88:6D:2F:CA:DD:A3:FF:50:79:E3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F5B37149509F2F0BBEAD1063BB7B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jcCwZAf4pUQeMIhtL8rdo_9QeeM.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48614
IP address blocks: 195.133.68.0/22 maxlen: 22
194.87.112.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f5:b3:71:49:50:9f:2f:0b:be:ad:10:63:bb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc0b06407f8a5441e30886d2fcadda3ff5079e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:74:c5:d2:e8:b7:66:2f:46:b0:e6:60:2c:
50:2b:c5:01:0e:65:fa:d0:1a:55:5c:b4:d4:a3:2b:
b9:0b:0f:48:09:e8:a5:7c:dd:31:c4:bf:ae:27:07:
09:d1:3d:15:48:0b:1b:6e:3e:d5:92:fa:9e:75:d2:
40:71:0e:bb:c2:20:fd:a0:8c:7e:18:90:8f:ff:af:
5d:ef:e4:6c:5c:0a:16:ea:bd:35:66:db:07:74:b2:
45:3e:e4:79:dc:83:57:25:1c:71:0e:66:cf:95:d6:
6d:88:c7:61:27:a2:54:b0:d0:4b:44:ba:7e:4d:8a:
2e:e2:88:e4:f9:2b:1c:ea:d3:bd:d7:96:b0:ed:f9:
de:b4:0a:cd:a6:87:61:2e:a0:14:62:fc:dd:e0:ea:
a3:06:35:ad:7b:98:07:91:7f:bc:37:ac:69:de:d5:
32:0a:99:47:80:55:ab:28:10:77:da:f8:23:72:f3:
00:01:c0:e3:00:a4:e1:f8:13:74:7e:89:c0:1f:13:
f9:fe:a4:f7:de:b7:7a:8a:6b:5b:5b:90:90:cc:03:
e4:15:a8:79:92:24:79:89:e6:29:c0:a6:1d:c7:86:
a9:ce:8c:4d:73:42:a0:c7:e4:2d:95:f6:6f:62:36:
cf:27:20:85:d5:70:2a:a3:99:8a:f5:f3:c0:06:b3:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:B0:64:07:F8:A5:44:1E:30:88:6D:2F:CA:DD:A3:FF:50:79:E3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jcCwZAf4pUQeMIhtL8rdo_9QeeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.112.0/23
195.133.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:27:00:08:56:83:2a:16:1e:f3:ad:eb:62:6e:45:ed:c8:f8:
33:4e:d2:39:95:4e:e7:e5:bd:bd:02:6f:92:53:37:28:e7:42:
0f:27:18:f5:22:39:25:2a:d1:01:f2:bd:25:f7:4c:de:77:87:
15:5d:d5:1b:c2:44:4a:2e:c3:d6:fb:e1:a4:b6:98:49:f3:74:
f3:33:d0:d7:e1:cc:cf:05:4f:1e:ee:87:db:92:83:0f:4f:58:
4c:0b:72:d1:98:6c:2c:34:05:b2:b4:41:10:2c:b0:84:3d:9d:
ab:40:4e:0e:9c:f2:04:0a:c3:cb:f7:a4:2e:1c:c5:b4:cb:c4:
63:69:75:e3:df:a4:22:9a:2c:3f:8b:cc:d2:0c:5d:8f:05:f2:
9b:83:cc:cb:b4:e4:d3:9f:5f:4d:f6:bd:d7:3a:f0:a9:4c:7a:
e4:f0:e4:a1:7c:71:61:36:9e:40:9b:06:cf:4b:69:8f:79:8c:
ac:07:55:74:66:ee:ea:30:9d:db:13:ea:98:02:eb:d0:70:33:
30:b3:13:fd:43:f5:61:53:5c:27:73:da:59:2c:f4:a4:cd:c7:
89:71:71:38:22:19:f8:e2:09:41:f3:41:d3:0b:9b:ad:a3:f9:
10:59:8a:49:ae:e1:80:6e:db:fc:70:60:0f:77:32:a0:e4:fc:
fa:ee:f0:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvZvWzcUlQny8Lvq0QY7t7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGMwYjA2NDA3ZjhhNTQ0MWUzMDg4NmQyZmNhZGRhM2ZmNTA3OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdR0xdLot2YvRrDmYCxQK8UBDmX6
0BpVXLTUoyu5Cw9ICeilfN0xxL+uJwcJ0T0VSAsbbj7VkvqeddJAcQ67wiD9oIx+
GJCP/69d7+RsXAoW6r01ZtsHdLJFPuR53INXJRxxDmbPldZtiMdhJ6JUsNBLRLp+
TYou4ojk+Ssc6tO915aw7fnetArNpodhLqAUYvzd4OqjBjWte5gHkX+8N6xp3tUy
CplHgFWrKBB32vgjcvMAAcDjAKTh+BN0fonAHxP5/qT33rd6imtbW5CQzAPkFah5
kiR5ieYpwKYdx4apzoxNc0Kgx+QtlfZvYjbPJyCF1XAqo5mK9fPABrPX8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI3AsGQH+KVEHjCIbS/K3aP/UHnjMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvamNDd1pBZjRwVVFlTUlodEw4cmRvXzlRZWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwldwAwQC
w4VEMA0GCSqGSIb3DQEBCwUAA4IBAQAuJwAIVoMqFh7zretibkXtyPgzTtI5lU7n
5b29Am+SUzco50IPJxj1IjklKtEB8r0l90zed4cVXdUbwkRKLsPW++GktphJ83Tz
M9DX4czPBU8e7ofbkoMPT1hMC3LRmGwsNAWytEEQLLCEPZ2rQE4OnPIECsPL96Qu
HMW0y8RjaXXj36Qimiw/i8zSDF2PBfKbg8zLtOTTn19N9r3XOvCpTHrk8OShfHFh
Np5AmwbPS2mPeYysB1V0Zu7qMJ3bE+qYAuvQcDMwsxP9Q/VhU1wnc9pZLPSkzceJ
cXE4Ihn44glB80HTC5uto/kQWYpJruGAbtv8cGAPdzKg5Pz67vBr
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:19 2024 by rpki-client on console-ams.rpki-client.org